CVE-2011-1754

Publication date 21 June 2011

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Description

jabberd14 1.6.1.1 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.

Status

Package Ubuntu Release Status
jabberd14 11.04 natty
Fixed 1.6.1.1-5+squeeze1build0.11.04.1
10.10 maverick
Fixed 1.6.1.1-5+squeeze1build0.10.10.1
10.04 LTS lucid
Fixed 1.6.1.1-5+squeeze1build0.10.04.1
8.04 LTS hardy Not in release

References

Other references